3 ms·
You must encrypt and salt passwords and retrieve them without being susceptible to timing attacks. PKCE. 2FA/TOTP as well.
by n2d4 2y ago
You must encrypt and salt passwords and retrieve them without being susceptible to timing attacks. PKCE. 2FA/TOTP as well.
- tgma 2y agoThose are traditionally done with existing proven solutions, not "rolling your own crypto" though.